Main
Vulnerability Database
Exploits
ID:6226 - Exploit for Improper access control in EMC Avamar and EMC Integrated Data Protection Appliance - CVE-2018-1217
ID:6226 - Exploit for Improper access control in EMC Avamar and EMC Integrated Data Protection Appliance - CVE-2018-1217
Published: June 17, 2021
Vulnerability identifier: #VU11623
Vulnerability risk: Low
CVE-ID: CVE-2018-1217
CWE-ID: CWE-284
Exploitation vector: Remote access
Vulnerable software:
EMC Avamar
EMC Integrated Data Protection Appliance
EMC Avamar
EMC Integrated Data Protection Appliance
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to obtain potentially sensitive information and write arbitrary files on the target system.
The weakness exists due to improper access control. A remote attacker can view or modify the LDLS credentials, which are used to authenticate to Dell EMC Online Support.
The weakness exists due to improper access control. A remote attacker can view or modify the LDLS credentials, which are used to authenticate to Dell EMC Online Support.
Remediation
Update to 7.3.1 - HOTFIX 290316, 7.4.1 - HOTFIX 291882 or 7.5.0 - HOTFIX 291881.